TAILIEUCHUNG - Lecture notes on Computer and network security: Lecture 16 - Avinash Kak

Lecture 16 - TCP/IP vulnerabilities and DoS attacks: IP spoofing, SYN flooding, and the shrew DoS attack. The goals of this chapter are: To review the IP and TCP packet headers, controlling TCP traffic congestion and the shrew DoS attack, the TCP SYN flood attack for denial of service, IP source address spoofing attacks,. | Lecture 16: TCP/IP Vulnerabilities and DoS Attacks: IP Spoofing, SYN Flooding, and The Shrew DoS Attack Lecture Notes on “Computer and Network Security” by Avi Kak (kak@) April 16, 2016 3:11pm c 2016 Avinash Kak, Purdue University Goals: • To review the IP and TCP packet headers • Controlling TCP Traffic Congestion and the Shrew DoS Attack • The TCP SYN Flood Attack for Denial of Service • IP Source Address Spoofing Attacks • BCP 38 for Thwarting IP Address Spoofing for DoS Attacks • Python and Perl Scripts for Mounting DoS Attacks with IP Address Spoofing and SYN Flooding • Troubleshooting Networks with the Netstat Utility CONTENTS Section Title Page TCP and IP 3 The TCP/IP Protocol Stack 5 The Network Layer (also known as the Internet Layer or the IP Layer) 13 The Transport Layer (TCP) 23 TCP versus IP 33 How TCP Breaks Up a Byte Stream That Needs to be Sent to a Receiver 35 The TCP State Transition Diagram 37 A Demonstration of the 3-Way Handshake 43 Splitting the Handshake for Establishing a TCP Connection 51 TCP Timers 57 TCP Congestion Control and the Shrew DoS Attack 59 SYN Flooding 67 IP Source Address Spoofing for SYN Flood DoS Attacks 70 Thwarting IP Source Address Spoofing With BCP 38 83 Demonstrating DoS through IP Address Spoofing and SYN Flooding When The Attacking and The Attacked Hosts Are in The Same LAN 88 Using the Netstat Utility for Troubleshooting Networks 101 Homework Problems 111 Computer and Network Security by Avi Kak Lecture 16 : TCP and IP • We now live in a world in which the acronyms TCP and IP have become almost as commonly familiar as the other computerrelated words like bits, bytes, megabytes, etc. • IP stands for the Internet Protocol that deals with routing packets of data from one computer to another or from one router to another. • On the other hand, TCP, which stands for

• An ninh - Bảo mật
• Network security
• Lecture notes on Computer and network security
• Computer security
• TCP packet headers
• TCP vulnerabilities
• IP spoofing
• Web security
• security rules
• encryption techniques
• security techniques
• Security chat rooms
• especially
• Network Security Tools
• CCNA Security
• Lecture CCNA Security
• Modern Network Security Threats
• Evolution of Network Security
• Drivers for Network Security
• Network Perimeter
• Network Perimeter Security
• Network Security Principles
• Cryptography
• IDS Tools
• CGI attacks
• network intruders
• Managing Security
• Wireless
• Wireless Network Security
• attack techniques
• defensive techniques
• operating system security
• application security
• security policy
• Network Security Fundamentals
• Guide to Network Security Fundamentals
• Information security
• Define information security
• Information security careers
• Operational security
• Harden physical security
• Secure the physical environment
• Mobile device security
• Lecture Network security
• Computer network
• Computer hacking
• Internet security
• Network security model
• Securing the Network Infrastructure
• Network cable plant
• Secure removable media
• Network security hacks
• Ebook Network security hacks
• Network security technologies
• Unix host security
• Windows host security
• Wireless Security
• Advanced security
• Computer forensics
• Harden security
• Network Management Security
• Management Security
• security mechanisms
• security services
• security architecture
• encryption system
• Security principles
• Effective authentication methods
• Control access to computer systems
• Security Baselines
• Disable nonessential systems
• Harden operating systems
• Protect e mail systems
• World Wide Web vulnerabilities
• Security policy cycle
• Risk identification
• Security management
• Identity management
• Plan for change management
• CompTIA® Security+
• CompTIA Security+ certification
• Linux file manipulation tools
• Internal physical security controls
• Network hardware security modules